Privacy Policy

Last updated: March 2026

This privacy policy explains how this application handles your personal data. We are committed to full compliance with the General Data Protection Regulation (GDPR — EU 2016/679).

Data Controller

Controller: Maël

Contact: mael.app@proton.me

For any question or request regarding your personal data, you may contact the controller at the above email.

Data We Collect

CV data (your content)

  • The CV information you enter (name, work experience, education, skills, etc.) is stored exclusively in your browser's localStorage.
  • It is only transmitted to our server when you click "Generate PDF", solely for the purpose of rendering your PDF.
  • It is never stored, logged, or retained on the server. It is deleted from server memory immediately after your PDF is delivered.

Profile photo (optional)

  • If you upload a profile photo, it is converted to a base64 string in your browser and temporarily held in memory during PDF generation.
  • It is never written to disk and is deleted from server memory immediately after PDF delivery.

Analytics (Vercel Analytics & Speed Insights)

  • This site uses Vercel Analytics and Vercel Speed Insights to measure traffic and performance.
  • These tools collect: page views, navigation events, Web Vitals metrics (load time, etc.), approximate geographic region (country/city level, derived from IP — the IP itself is not stored), and User-Agent (browser/OS type).
  • No cookies are set. No personal data is stored. No cross-site tracking is performed.
  • Vercel Analytics is designed to be privacy-first and GDPR-compliant. See vercel.com/docs/analytics/privacy-policy.

Network & infrastructure (Cloudflare)

  • DNS resolution and DDoS protection are provided by Cloudflare. Cloudflare may process your IP address and request metadata for security and routing purposes.
  • Cloudflare acts as a data processor under its own Data Processing Addendum. See cloudflare.com/privacypolicy.

Cookies & Local Storage

This site does not use cookies.

Your CV data and settings are stored in your browser's localStorage solely for your convenience (so your data persists between sessions). This storage never leaves your device except when you explicitly generate a PDF.

You can clear this data at any time through your browser settings.

Legal Basis for Processing

CV data: Legitimate interest and performance of a service you explicitly requested (GDPR Art. 6.1.b).

Analytics: Legitimate interest in understanding aggregate usage patterns (GDPR Art. 6.1.f). No personal data is processed.

Data Retention

Server-side: zero retention. All CV data and generated PDFs are deleted from server memory immediately after download (or after a maximum of 5 minutes if not downloaded).

Client-side: data remains in your browser's localStorage until you clear it manually.

Your Rights (GDPR)

You have the following rights regarding your personal data:

• Right of access (Art. 15): request a copy of your data.

• Right to rectification (Art. 16): correct inaccurate data.

• Right to erasure (Art. 17): request deletion of your data.

• Right to data portability (Art. 20): receive your data in a structured format.

• Right to object (Art. 21): object to processing based on legitimate interests.

To exercise these rights, contact: mael.app@proton.me. We will respond within 30 days.

You may also lodge a complaint with your national supervisory authority. In France: Commission Nationale de l'Informatique et des Libertés (CNIL) — cnil.fr.

Data Transfers Outside the EU

Vercel and Cloudflare are US-based companies. Data transfers to the US are carried out under Standard Contractual Clauses (SCCs) as approved by the European Commission, ensuring an adequate level of protection.

Changes to This Policy

This policy may be updated from time to time. The date at the top of this page reflects the most recent revision.